This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json) Hash identifier: pGgrPUl1vpsCGsvkNxbxe6Dtm9W8EqW4suajCnAurVk= Subject key identifier: 49:A4:7A:E4:8D:E9:C3:DF:92:D2:CE:CC:7E:C2:BF:85:45:1C:9E:73 Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff Certificate serial: 019AF31B3913AE40EC294A20EE385C2810E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft Manifest number: 1540 Signing time: Sat 06 Dec 2025 10:00:38 +0000 Manifest this update: Sat 06 Dec 2025 10:00:38 +0000 Manifest next update: Sun 07 Dec 2025 10:00:38 +0000 Files and hashes: 1: 79fBoxetqM8W78-kGmHTvjPW7Uw.roa (hash: pMW1Mp2B+qXHZp51RoJRa8NJEQ1rG2VsgYraYBKPRXE=) 2: 8J0Lc2AsJQgnkJG9_qri1EHFctE.roa (hash: C4HlyCH6kbwI3fK9kG+XOoCsicg+/qe888AdIQka/S0=) 3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: Gz0U+tkl4QL09hKWNb4HAJPRaiN4haA1XLbyivfSU2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:39:13:ae:40:ec:29:4a:20:ee:38:5c:28:10:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff Validity Not Before: Dec 6 10:00:38 2025 GMT Not After : Dec 7 10:00:38 2025 GMT Subject: CN=49a47ae48de9c3df92d2cecc7ec2bf85451c9e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:be:ce:44:59:57:ad:77:fd:fc:ba:43:24: 9b:b6:38:80:a3:ab:0b:13:27:50:b7:83:7f:e8:43: 61:3d:81:db:6d:af:27:2b:e9:04:38:15:c5:eb:0c: 98:3f:14:74:70:16:32:14:d1:31:0c:5f:dd:83:4f: d6:96:1c:17:03:e0:e6:32:75:b3:9d:8c:b5:7c:ec: d2:a4:8e:b9:f8:5c:bd:1f:cf:9e:47:80:93:db:89: 91:61:c8:59:b9:df:45:e1:a8:a6:1b:4b:6f:ee:62: 1c:1a:73:46:c7:52:04:e0:c7:d5:ee:0a:f6:e1:b2: bd:f7:ac:89:a1:3c:58:33:61:c6:91:09:4f:2d:8d: e3:8d:5d:d8:ca:de:6c:78:ef:93:b7:51:28:9f:72: 98:dc:fd:f4:eb:bd:b1:52:bf:9a:68:fd:0a:f4:27: 3f:b8:e5:35:74:b1:55:c7:73:39:0e:f5:59:65:0c: 5b:2b:ec:9f:7d:cd:d7:f3:64:69:e7:6f:10:a1:fe: 10:57:bb:fd:67:3e:6b:48:9c:9e:0a:8e:3b:c6:5c: fb:f3:ba:db:7b:41:65:1b:27:a1:08:76:d9:4b:c2: c5:ac:17:48:b9:37:79:0e:9e:0b:0f:44:85:17:a1: de:3d:51:71:87:86:1b:51:fd:4b:75:85:ab:d7:b8: 0a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A4:7A:E4:8D:E9:C3:DF:92:D2:CE:CC:7E:C2:BF:85:45:1C:9E:73 X509v3 Authority Key Identifier: keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c5:31:81:76:7f:83:bd:9d:7a:44:ec:c7:d5:41:cd:d9:6e: f5:78:5d:ec:0d:d4:64:a4:ea:9b:03:f1:b0:03:0b:7f:14:37: d8:75:ee:78:4e:f3:85:48:17:10:c2:25:21:fe:14:16:06:66: c8:74:99:55:c4:cd:b7:87:fd:67:63:d1:79:8b:d7:ab:5a:57: 53:b5:b6:72:ce:da:14:90:22:7a:ea:9a:58:3c:40:cd:51:b4: 85:dc:f3:96:4f:f8:20:a9:07:b1:be:cd:20:31:a7:3d:f3:6d: c4:90:27:fc:fe:0b:cc:e3:98:11:90:5c:50:68:2b:7c:38:76: aa:39:03:62:63:9c:14:8d:ea:2c:7c:e1:4c:4f:6d:c4:c3:f8: b3:60:c2:32:1b:81:40:89:f2:3b:ed:5a:98:95:4e:94:27:04: 2f:dd:e4:dc:9b:36:4b:9e:44:5b:5d:60:d0:3d:bd:5c:1a:42: 55:30:9d:f1:38:03:e1:62:61:eb:c7:16:84:92:8b:59:cc:a0: 7f:56:bd:23:40:61:f7:0c:a4:27:df:4f:8a:f9:9e:9f:f3:9a: d3:c1:1a:da:8d:0f:d9:c9:51:f6:6e:15:99:59:db:48:8a:5c: e8:8c:af:d5:8e:d5:e6:4c:12:f1:3c:98:42:01:32:ae:44:9d: 00:6d:01:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzkTrkDsKUog7jhcKBDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OWZmNDA4MzFjYTY2Zjk5NmM3NmVhNDY2YWY0OTQ3NmZl Y2QxZmYwHhcNMjUxMjA2MTAwMDM4WhcNMjUxMjA3MTAwMDM4WjAzMTEwLwYDVQQD Eyg0OWE0N2FlNDhkZTljM2RmOTJkMmNlY2M3ZWMyYmY4NTQ1MWM5ZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr2+zkRZV613/fy6QySbtjiAo6sL EydQt4N/6ENhPYHbba8nK+kEOBXF6wyYPxR0cBYyFNExDF/dg0/WlhwXA+DmMnWz nYy1fOzSpI65+Fy9H8+eR4CT24mRYchZud9F4aimG0tv7mIcGnNGx1IE4MfV7gr2 4bK996yJoTxYM2HGkQlPLY3jjV3Yyt5seO+Tt1Eon3KY3P30672xUr+aaP0K9Cc/ uOU1dLFVx3M5DvVZZQxbK+yffc3X82Rp528Qof4QV7v9Zz5rSJyeCo47xlz787rb e0FlGyehCHbZS8LFrBdIuTd5Dp4LD0SFF6HePVFxh4YbUf1LdYWr17gKwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmkeuSN6cPfktLOzH7Cv4VFHJ5zMB8GA1UdIwQY MBaAFJSf9Agxymb5lsdupGavSUdv7NH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgt MTQ3YWRjOTBjYTBmLzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgtMTQ3YWRjOTBjYTBm LzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsUxgXZ/ g72dekTsx9VBzdlu9Xhd7A3UZKTqmwPxsAMLfxQ32HXueE7zhUgXEMIlIf4UFgZm yHSZVcTNt4f9Z2PReYvXq1pXU7W2cs7aFJAieuqaWDxAzVG0hdzzlk/4IKkHsb7N IDGnPfNtxJAn/P4LzOOYEZBcUGgrfDh2qjkDYmOcFI3qLHzhTE9txMP4s2DCMhuB QInyO+1amJVOlCcEL93k3Js2S55EW11g0D29XBpCVTCd8TgD4WJh68cWhJKLWcyg f1a9I0Bh9wykJ99Pivmen/Oa08Ea2o0P2clR9m4VmVnbSIpc6Iyv1Y7V5kwS8TyY QgEyrkSdAG0BOw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:14 2025 by rpki-client